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AMENDMENTS TO THE CLAIMS 

Claims 12-15, 28-31, 50-52, 58-59, 61-63, 66, and 70 are currently amended, without 
acquiescence in cited basis for rejection or prejudice to pursue in a related application. Claims 
40, 56-57, 67-69, and 71-79 have been cancelled. Claims 80-104 are new. A complete listing of 
the current pending claims is provided below and supersedes all previous claim listing(s.) No 
new matter has been added. 

Claims 1-11 (canceled) 

12. (Currently Amended) A method for regulating access by a first process to a first data 
location on a storage device, comprising: 

receiving from the first process a request to access the first data location on a storage 
device, the request comprising a first se^ef-information adapted to identify the first 
data location and a second set-ef-information adapted to identify the first process;? 
th e s e cond s e t of information adapt e d to b e compar e d with third information, th e third 
information b e ing adapt e d to id e ntify the acc e ss rights of th e first process, th e third 
s e t of information b e ing associat e d with th e storag e d e vic e . 

comparing a corresponding portion of the second set-ef-information with a relevant 
portion of i he-a third information which is adapted to identify an access right of the 
first process; and? 

granting access to the first data location and modifying the third information if the 
corresponding portion of the second se^ef-information matches the relevant portion 
of the third s e t of information.rand 

denying acc e ss to th e first data location if th e s e cond s e t of information do e s not match 
the third set of information. 
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1 3 . (Currently Amended) The method of claim 1 2, wh e r e in in which the step of granting 
access further comprises changing data associated with a second data location by the first process 
to deny the second process of accessing the second data location, th e first data location contains 
information adapt e d to identify th e acc e ss rights of a s e cond proc e ss, furth e r comprising 
disallowing th e s e cond proc e ss acc e ss to a second data location on th e storag e devic e by 
changing data contain e d in th e first data location. 

14. (Currently Amended) The method of claim 1 2, wh e rein in which the third s e t of 
information is persistent. 

15. (Currently Amended) The method of claim 12, wh e r e in in which the storage device is a 
first storage device and the third se^efinformation is stored in a second storage device. 

16. (Original) The method of claim 12, wherein the second storage device is a memory. 
Claims 17-27 (Canceled) 

28. (Currently Amended) A computer program product that includes a computer readable 
storage medium comprising us e abl e by a proc e ssor, th e m e dium having stor e d th e r e on a 
sequence of instructions which, when executed bya said-processor, causes said processor to 
execute a method for regulating access by a first process to a first data location on a storage 
device, the process comprising: 

receiving from the first process a request to access the first data location on a storage 
device, the request comprising a first set-e£information adapted to identify the first 
data location and a second set-e£-information adapted to identify the first process;? 
th e s e cond s e t of information adapt e d to bo compar e d with third information, th e third 
information b e ing adapted to identify th e acc e ss rights of the first proc e ss, th e third 
set of information b e ing associat e d with the storag e d e vice. 

comparing a corresponding portion of the second set-ef-information with a relevant 
portion of t he-a third information which is adapted to identify an access right of the 
first process: and? 
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granting access to the first data location and modifying the third information if the 
corresponding portion of the second set-ef-information matches the relevant portion 
of the third se^ef infoimation. r and 

d e nying acc e ss to th e first data location if the second s e t of information do e s not match 
the third s e t of information. 

29. (Currently Amended) The computer program product of claim 28, wh e r e in in which the 
step of granting access further comprises changing data associated with a second data location by 
the first process to deny the second process of accessing the second data location, t h e first data 
location contains information adapt e d to id e ntify the access rights of a s e cond process, furth e r 
comprisingdisallowing th e s e cond proc e ss acc e ss to a second data location on the storag e d e vic e 
by changing data contain e d in the first data location. 

30. (Currently Amended) The computer program product of claim 28, wh e r e in in which the 
third set-ef-information is persistent. 

3 1 . (Currently Amended) The computer program product of claim 28, wh e r e in in which the 
storage device is a first storage device and the third set-e^information is stored in a second 
storage device. 

32. (Previously Presented) The computer program product of claim 28, wherein the second 
storage device is a memory. 

Claims 33-48 (canceled) 

49. (Previously Presented) The method of claim 12, 'in which the first process comprises 
multiple processes. 

50. (Currently Amended) The method of claim 12, wherein in which the request further 
comprises ^additional sets-ef-information adapted to identify the access right rights of the first 
process, further comprising processing the additional sets-ef information to determine the access 
right rights. 

51. (Currently Amended) The method of claim 50, wherein the access to the first data 
location is granted, furthe r comprises comprising granting access to the first data location when 
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both the r e sults of processing of said additional sets-ef-information, and tho results of comparing 
comparison of a corresponding portion of the second se^efinformation with a relevant portion of 
the third set-ef-information succeed ar e succ e ssful 

52. (Currently Amended) The method of claim 50, further comprising denying access to the 
first data location when either the r e sults of processing of said additional sets-ef information, or 
the r e sults of comparin g comparison of a corresponding portion of the second set-etinformation 
with a relevant portion of the third set^e£information fails are failur e. 

53. (Previously Presented) The method of claim 12, wherein said request to access the first 
data location is a data output request. 

54. (Previously Presented) The method of claim 12, wherein said request to access the first 
data location is a data input request. 

55. (Previously Presented) The method of claim 12, wherein said request to access the first 
data location is a access-blocking request. 

56-57 (Cancelled) 

58. (Currently Amended) The method of claim 13 , in which the step of wh e rein changing 
data in the second Sfst-data location further comprises changing th e data a second storage key to 
a pre-defined value. 

59. (Currently Amended) The method of claim 1 3, wherein the request further comprises an 
additional information adapted to identify the access right rights of a second process to multiple 
storage devices , further comprising disallowing th e s e cond proc e ss acc e ss to said multipl e 
storag e d e vices . 

60. (Previously Presented) The computer program product of claim 28, wherein the first 
process comprises multiple processes. 

61 . (Currently Amended) The computer program product of claim 28, wh e r e in in which the 
request further comprises an additional sets-ef-information adapted to identify the access right 
rights-of the first process, further comprising processing the additional sets-ef-information to 
determine access right rights . 
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62. (Currently Amended) The computer program product of claim 61 , wherein the access to 
the first data location is granted, furthe r comprises comprising granting access to the first data 
location when both the r e sults of p rocessing of said additional sets-e£information, and the r e sults 
of comparing comparison of a corresponding portion of the second set-ef-information with a 
relevant portion of the third set-ef-information succeed are successful . 

63. (Currently Amended) The computer program product of claim 61 , further comprising 
denying access to the first data location when either the r e sults of p rocessing of said additional 
sets-ef-information, or the r e sults of comparing comparison of a corresponding portion of the 
second set-ef-information with a relevant portion of the third se^ef-information fails ar e failure . 

64. (Previously Presented) The computer program product of claim 28, wherein said request 
to access the first data location is a data output request. 

65. (Previously Presented) The computer program product of claim 28, wherein said request 
to access the first data location is a data input request. 

66. (Currently Amended) The computer program product of claim 28, wh e r e in i n which said 
request to access the first data location isjin a-access-blocking request. 

67-69. (Cancelled) 

70. (Currently Amended) The computer program product of claim 29, in which w her e in the 
request further comprises information adapted to identify the access right rights of a second 
process to multiple storage devices , further comprising disallowing denying the second proc e ss 
acc e ss to said multipl e storag e d e vic e s . 

71-79. (Cancelled) 

80. (New) The method of claim 12, in which the step of modifying the third information is 
performed by applying a logical or operator to the third information and a fourth information. 

8 1 . (New) The method of claim 12, in which the step of modifying the third information is 
performed by applying a logical and operator to the third information and the fourth 
information. 

82. (New) The method of claim 80, in which the fourth information is a key mask. 
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83. (New) The method of claim 12 further comprises denying access to the first data location 
if the corresponding portion of the second information does not match the relevant portion of the 
third information. 

84. (New) The method of claim 83, in which the step of denying access further comprising 
sending a message to the first process or generating a fault. 

85. (New) The computer program product of claim 28, in which the step of modifying the 
third information is performed by applying a logical or operator to the third information and a 
fourth information. 

86. (New) The computer program product of claim 28, in which the step of modifying the 
third information is performed by applying a logical and operator to the third information and 
the fourth information. 

87. (New) The computer program product of claim 28 further comprises denying access to 
the first data location if the corresponding portion of the second information does not match the 
relevant portion of the third information. 

88. (New) A system for regulating access by a first process to a first data location on a 
storage device, comprising: 

means for receiving from the first process a request to access the first data location on a 
storage device, the request comprising a first information adapted to identify the first 
data location and a second information adapted to identify the first process; 

means for comparing a corresponding portion of the second information with a relevant 
portion of a third information which is adapted to identify an access right of the first 
process; and 

means for granting access to the first data location and modifying the third information if 
the relevant portion of the second information matches the corresponding portion of 
the third information. 

89. (New) The system of claim 88, wherein the first process comprises multiple processes. 
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90. (New) The system of claim 88, in which the request further comprises additional 
information adapted to identify the first process. 

91. (New) The system of claim 90, in which the means for comparing a corresponding 
portion of the second information with a relevant portion of the third information comprises: 

means for comparing an additional information to the third information; 

means for generating a comparison success if both a corresponding portion of the 

additional information matches a first relevant portion of the third information, and, a 
corresponding portion of the second information matches a second relevant portion of 
the third information; and 

means for generating a comparison failure if either the corresponding portion of the 
additional information does not match the first relevant portion of the third 
information or if a corresponding portion of the second information does not match 
the second relevant portion of the third information. 

92. (New) The system of claim 88, in which the means for granting access further 
comprising means for changing one or more additional storage keys each of which is associated 
with an additional data location by the first process to deny the second process of accessing the 
additional data locations. 

93. (New) The system of claim 92, in which the means for changing the data in the second 
data location further comprises means for changing the additional storage keys to pre-defined 
values. 

95. (New) The system of claim 88, in which the request to access the first data location is a 
data output request. 

96. (New) The system of claim 88, in which the request to access the first data location is a 
data input request. 

97. (New) The system of claim 88, in which the request to access the first data location is an 
access-blocking request. 
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98. (New) The system of claim 88, in which the means for modifying the third information 
comprises means for applying a logical OR operator to the third information and a fourth 
information. 

99. (New) The system of claim 88, in which the means for modifying the third information 
comprises means for applying a logical AND operator to the third information and the fourth 
information. 

100. (New) The system of claim 88 further comprises means for denying access to the first 
data location if the corresponding portion of the second information does not match the relevant 
portion of the third information. 

101. (New) The method of claim 83, in which the step of denying access is initiated by the 
first process. 

102. (New) The method of claim 83, in which the step of denying access is initiated by the 
storage device. 

103. (New) The computer program product of claim 87, in which the step of denying access is 
initiated by the first process. 

104. (New) The computer program product of claim 87, in which the step of denying access is 
initiated by the storage device. 
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